Trojan.Agent.CNMW information

The Trojan.Agent.CNMW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.CNMW virus can do?

Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid

How to determine Trojan.Agent.CNMW?


File Info:
name: EDF68AB4D701CBAF57F8.mlw
path: /opt/CAPEv2/storage/binaries/8f9d6582e6d6a76c19fc20c24a499160f4ccd26955354599ee7ceef7404f418f
crc32: 7E4A9FD2
md5: edf68ab4d701cbaf57f8c143a032645d
sha1: 002bc1a74ff95bd6fdc3ba2b9b65d869b0f2a36e
sha256: 8f9d6582e6d6a76c19fc20c24a499160f4ccd26955354599ee7ceef7404f418f
sha512: 095052c7901c989a25f6f0ac1ecab169a993b0f1917b9cea8dd799f3d06d4e9e8dfad26555a9fee59a847a4b42dda6031a08712d53b05f3ef19775f3474a56b5
ssdeep: 96:4lC8Vk7CvuHrvcQ7HKcWw4bRcpWw4bdPtboynyEKPJab3G4yeTF+:YqCWLkQ7KXbjbdP1oynyEKUb3yex+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T136923F06E72584F5E8B5CE3027FB1E768D70BC630D55929B4A16FE9DA830708AB2734D
sha3_384: ea7bbd32d880a16b167d12ba65bcb390173a26a6f2fe509121e259c5cf92bd5f27a37a2fa77f7a0da5bc7be2ceb2196b
ep_bytes: 558bec6aff68d023400068e616400064
timestamp: 2014-09-17 18:15:31

Version Info:
CompanyName: 
FileDescription: dm MFC Application
FileVersion: 1, 0, 0, 1
InternalName: dm
LegalCopyright: Copyright (C) 2014
LegalTrademarks: 
OriginalFilename: dm.EXE
ProductName: dm Application
ProductVersion: 1, 0, 0, 1
Translation: 0x0409 0x04b0

Trojan.Agent.CNMW also known as:

Lionic	Trojan.Win32.Cnmw.4!c
CAT-QuickHeal	Trojan.Agent
McAfee	Artemis!EDF68AB4D701
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.CNMW
Alibaba	Trojan:Application/Rogue.35dc65c4
Cybereason	malicious.4d701c
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
BitDefender	Trojan.Agent.CNMW
SUPERAntiSpyware	Trojan.Agent/Generic
MicroWorld-eScan	Trojan.Agent.CNMW
Ad-Aware	Trojan.Agent.CNMW
VIPRE	Trojan.Win32.Generic!BT
FireEye	Trojan.Agent.CNMW
Emsisoft	Trojan.Agent.CNMW (B)
Ikarus	Trojan.Rogue
GData	Trojan.Agent.CNMW
Webroot	W32.Trojan.Gen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.CBBA31
Kingsoft	Win32.Troj.Generic.v.(kcloud)
Gridinsoft	Ransom.Win32.Zbot.sa
Arcabit	Trojan.Agent.CNMW
Microsoft	PWS:Win32/Zbot!ml
VBA32	Trojan.Tilken
ALYac	Trojan.Agent.CNMW
Malwarebytes	Trojan.Agent.ED
TrendMicro-HouseCall	TROJ_GEN.R002H09B822
Rising	Malware.Heuristic!ET#76% (RDMK:cmRtazpqZpwfiLwTI+pmvw8wbJEY)
BitDefenderTheta	Gen:NN.ZexaCO.34232.bq0@a8S2rlmk

How to remove Trojan.Agent.CNMW?

Trojan.Agent.CNMW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X